mariahilf.de XSS vulnerability

Open Bug Bounty ID: OBB-710373 Description| Value ---|--- Affected Website:| mariahilf.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2018-3139, CVE-2018-3180)

Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about multiple security vulnerabilities affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-3139 DESCRIPTION: An unspecifie...

Partner Perspectives: Insight on Turla PNG Dropper

Editor's Note: This blog originally appeared on NCC Group's website. This is a short blog post on the PNG Dropper malware that has been developed and used by the Turla Group 1. The PNG Dropper was first discovered back in August 2017 by Carbon Black researchers. Back in 2017 it was being used to...

MsQueue and SegQueue suffer from double-free

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees. The flaw was corrected by wrapping elements inside queues in a ManuallyDrop. Thanks to @c0gent for reporting the issue...

SUSE-SU-2018:4011-1 Security update for SUSE Manager Server 3.2

This update fixes the following issues: apache-mybatis: - Install missing LICENSE.txt file bsc1114814 cobbler: - Fix service restart after logrotate for cobblerd bsc1113747 - Rotate cobbler logs at higher frequency to prevent disk fillup bsc1113747 hadoop: - Install missing LICENSE.txt file...

chrisbrowndocumentary.com XSS vulnerability

Open Bug Bounty ID: OBB-708377 Description| Value ---|--- Affected Website:| chrisbrowndocumentary.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score...

rgs.health.wa.gov.au XSS vulnerability

Open Bug Bounty ID: OBB-708296 Description| Value ---|--- Affected Website:| rgs.health.wa.gov.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

toastyegg.com XSS vulnerability

Open Bug Bounty ID: OBB-708091 Description| Value ---|--- Affected Website:| toastyegg.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

pinwormpictures.com XSS vulnerability

Open Bug Bounty ID: OBB-708048 Description| Value ---|--- Affected Website:| pinwormpictures.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

RHEL 6 : rubygem-activesupport (RHSA-2013:0202)

An updated rubygem-activesupport package that fixes one security issue is now available for Red Hat OpenShift Enterprise 1.0. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

magaza.com.ba XSS vulnerability

Open Bug Bounty ID: OBB-707738 Description| Value ---|--- Affected Website:| magaza.com.ba Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

protonet.com XSS vulnerability

Open Bug Bounty ID: OBB-706306 Description| Value ---|--- Affected Website:| protonet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

XSSFuzzer - A Tool Which Generates XSS Payloads Based On User-Defined Vectors And Fuzzing Lists

XSS Fuzzer is a simple application written in plain HTML/JavaScript/CSS which generates XSS payloads based on user-defined vectors using multiple placeholders which are replaced with fuzzing lists. It offers the possibility to just generate the payloads as plain-text or to execute them inside an...

formula1.it XSS vulnerability

Open Bug Bounty ID: OBB-705614 Description| Value ---|--- Affected Website:| formula1.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

norborneschools.com XSS vulnerability

Open Bug Bounty ID: OBB-705422 Description| Value ---|--- Affected Website:| norborneschools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

snelsongoldenms.org XSS vulnerability

Open Bug Bounty ID: OBB-705412 Description| Value ---|--- Affected Website:| snelsongoldenms.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

barnsley.parkwaycinemas.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-704534 Description| Value ---|--- Affected Website:| barnsley.parkwaycinemas.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

espn.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-704500 Description| Value ---|--- Affected Website:| espn.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

aldosnightclub.com XSS vulnerability

Open Bug Bounty ID: OBB-704259 Description| Value ---|--- Affected Website:| aldosnightclub.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

icomfort.ca XSS vulnerability

Open Bug Bounty ID: OBB-704152 Description| Value ---|--- Affected Website:| icomfort.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...